PT-2025-12347 · Audi · Audi Utr Dashcam

Geochen · Published 2025-03-20 · Updated 2025-03-20 · CVE-2025-2556

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:A/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Audi UTR Dashcam version 2.0

Description A vulnerability was found in the Audi UTR Dashcam, affecting an unknown functionality of the component Video Stream Handler. The manipulation leads to hard-coded credentials. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used.

Recommendations Update to version 2.89 to address this issue for new customers. Update to version 2.90 to address this issue for existing customers. As a temporary workaround, consider restricting access to the Video Stream Handler component until a patch is available.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-259

CWE-798

Related Identifiers

CVE-2025-2556

Affected Products

Audi Utr Dashcam

References · 10

• 🔥 https://github.com/geo-chen/Audi/blob/main/README.md#finding-3-rtsp-and-ftp-wide-open · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-2556 · Security Note
• https://twitter.com/WolfgangSesin/status/1902671615772729577 · Twitter Post
• https://t.me/cvenotify/115551 · Telegram Post
• https://vuldb.com/?id.300169 · Note
• https://t.me/cvedetector/20765 · Telegram Post
• https://vuldb.com/?ctiid.300169 · Note
• https://vuldb.com/?submit.513392 · Note
• https://twitter.com/CVEnew/status/1902816443197984967 · Twitter Post
• https://t.me/cvetracker/19569 · Telegram Post